Internship Cybersecurity

UEBA monitoring (no server access): review the external read-only dashboard, triage would-be actions, compile per-subject-type measurements and flag anomalies — no SSH, production or database access.

Security research: review and extend the team's research and propose practical improvements that raise the security posture.

Penetration-testing support: where asked, test with OWASP ZAP, Burp Suite and Kali Linux — scope- locked, test accounts only, rate-limited per the Rules of Engagement — capturing evidence and drafting findings for review. 

Documentation: weekly records, vulnerability tracker, test matrices and reports under supervision.

Requirements

PDPA: understands Malaysia's PDPA 2010 (consent, purpose, data minimisation, retention, security) and applies it — the product must meet PDPA requirements.

ISO/IEC 27001: working awareness of the relevant Annex A controls and able to document observations from his own perspective.

Tools: OWASP ZAP, Burp Suite and Kali Linux, with OWASP Testing Guide and safe-testing discipline (scope, RoE, rate-limiting, test accounts).

Skills

Penetration Testing, Cyber Threat Intelligence